| 2342 |
|
|
| 2343 |
Note that '\0'-terminated binary string is converted to TOMOYO's string |
Note that '\0'-terminated binary string is converted to TOMOYO's string |
| 2344 |
inside kernel and prefix "//" is automatically added to the string so |
inside kernel and prefix "//" is automatically added to the string so |
| 2345 |
that domainname does not confclict with domainnames created by execve(). |
that domainname does not conflict with domainnames created by execve(). |
| 2346 |
Without this prefix, if "<kernel> /usr/sbin/sshd /bin/bash" domain is |
Without this prefix, if "<kernel> /usr/sbin/sshd /bin/bash" domain is |
| 2347 |
allowed to open /proc/ccs/.transition for writing and |
allowed to open /proc/ccs/.transition for writing and |
| 2348 |
"<kernel> /usr/sbin/sshd /bin/bash /usr/bin/passwd" domain is allowed to |
"<kernel> /usr/sbin/sshd /bin/bash /usr/bin/passwd" domain is allowed to |
| 2360 |
|
|
| 2361 |
@ Allow building as loadable kernel module. |
@ Allow building as loadable kernel module. |
| 2362 |
|
|
| 2363 |
To be able to minimize filesize increment on vmlinux, I made it |
To be able to minimize filesize increment of vmlinux, I made it |
| 2364 |
possible to compile TOMOYO Linux as loadable kernel module. |
possible to compile TOMOYO Linux as loadable kernel module. |
| 2365 |
Although patching the kernel source and recompiling the kernel are |
Although patching the kernel source and recompiling the kernel are |
| 2366 |
inevitable, this change will make it easier to enable TOMOYO Linux |
inevitable, this change will make it easier to enable TOMOYO Linux |
| 2367 |
when there is a filesize limitation on vmlinux (e.g. embedded systems). |
when there is a filesize limitation on vmlinux (e.g. embedded systems). |
| 2368 |
|
|
| 2369 |
|
Fix 2010/03/25 |
| 2370 |
|
|
| 2371 |
|
@ Fix ccs_get_ipv6_address() bug. |
| 2372 |
|
|
| 2373 |
|
Since 1.7.0 , ccs_get_ipv6_address() was by error returning address of |
| 2374 |
|
"struct list_head ccs_address_list" if memory allocation failed. |
| 2375 |
|
As a result, ccs_put_ipv6_address() will modify memory near |
| 2376 |
|
"struct list_head ccs_address_list" if memory allocation failed. |
| 2377 |
|
|
| 2378 |
|
Fix 2010/03/26 |
| 2379 |
|
|
| 2380 |
|
@ Fix ccs_lport_reserved() bug. |
| 2381 |
|
|
| 2382 |
|
Since 1.7.0 , ccs_lport_reserved() was by error checking wrong port |
| 2383 |
|
number. As a result, "deny_autobind" keyword was not working as expected. |
| 2384 |
|
|
| 2385 |
|
Version 1.7.2 2010/04/01 Feature enhancement release. |
| 2386 |
|
|
| 2387 |
|
Fix 2010/04/10 |
| 2388 |
|
|
| 2389 |
|
@ Fix invalid "struct nameidata" to "struct path" conversion macro. |
| 2390 |
|
|
| 2391 |
|
Regarding kernels 2.6.24 and earlier, I was converting "struct nameidata" |
| 2392 |
|
to "struct path" in caller side so that I can unify the callee function's |
| 2393 |
|
parameter type. But it turned out that the macro I used did not follow C |
| 2394 |
|
standards and did not work with gcc 4.x . As a result, "allow_pivot_root" |
| 2395 |
|
keyword was not working as expected. |
| 2396 |
|
|
| 2397 |
|
Fix 2010/05/05 |
| 2398 |
|
|
| 2399 |
|
@ Fix incorrect audit on/off control. |
| 2400 |
|
|
| 2401 |
|
The grant_log= and reject_log= parameters of CONFIG::misc::env were not |
| 2402 |
|
used because I forgot to update request type. As a result, those of |
| 2403 |
|
CONFIG::file::execute were used for CONFIG::misc::env . |
| 2404 |
|
|
| 2405 |
|
Those of CONFIG::file::rewrite were not used because I forgot to update |
| 2406 |
|
request type. As a result, those of CONFIG::file::truncate were used for |
| 2407 |
|
CONFIG::file::rewrite . |
| 2408 |
|
|
| 2409 |
|
Fix 2010/05/10 |
| 2410 |
|
|
| 2411 |
|
@ Fix incorrect out of memory warning. |
| 2412 |
|
|
| 2413 |
|
Out of memory warnings were not printed in some cases by error. |
| 2414 |
|
|
| 2415 |
|
Fix 2010/05/27 |
| 2416 |
|
|
| 2417 |
|
@ Add missing rcu_dereference() for ccs_find_execute_handler(). |
| 2418 |
|
|
| 2419 |
|
Since 1.7.0 , ccs_find_execute_handler() was by error using |
| 2420 |
|
list_for_each_entry() rather than list_for_each_entry_rcu(). |
| 2421 |
|
This bug affects only Alpha architecture. |
| 2422 |
|
|
| 2423 |
|
Fix 2010/06/03 |
| 2424 |
|
|
| 2425 |
|
@ Fix missing sanity check for "file_pattern". |
| 2426 |
|
|
| 2427 |
|
Since 1.7.0 , ccs_write_pattern_policy() was by error accepting |
| 2428 |
|
invalid pathname. |
| 2429 |
|
|
| 2430 |
|
Fix 2010/06/09 |
| 2431 |
|
|
| 2432 |
|
@ Add missing ccs_put_name() in ccs_parse_envp(). |
| 2433 |
|
|
| 2434 |
|
Since 1.7.0 , ccs_parse_envp() was not calling ccs_put_name() if |
| 2435 |
|
environment variable's value ('if exec.envp["name"]="value"' condition) |
| 2436 |
|
was invalid. |
| 2437 |
|
|
| 2438 |
|
@ Add missing NULL check in ccs_condition(). |
| 2439 |
|
|
| 2440 |
|
Since 1.7.0 , if 'if symlink.target=' part was given against non-file |
| 2441 |
|
permissions (e.g. allow_env PATH if symlink.target="/"), it triggered |
| 2442 |
|
NULL pointer dereference. |
| 2443 |
|
|
| 2444 |
|
Fix 2010/07/21 |
| 2445 |
|
|
| 2446 |
|
@ Wait for next connection/datagram if current connection/datagram was |
| 2447 |
|
discarded. |
| 2448 |
|
|
| 2449 |
|
I was misunderstanding the discussion of post accept()/recvmsg() hook. |
| 2450 |
|
The kernel is allowed to wait for next connection/datagram unless |
| 2451 |
|
MSG_DONTWAIT or O_NONBLOCK is set. The kernel is allowed to return |
| 2452 |
|
-EAGAIN if MSG_DONTWAIT or O_NONBLOCK is set. |
| 2453 |
|
The change I made on 2009/05/08 was wrong. |
TOMOYO
Parent Directory
Revision Log
Patch